Senior Data Privacy and Protection Analyst

Join to apply for the Senior Data Privacy and Protection Analyst role at Barings.

Location: Charlotte, NC or London, UK • Department: Information Security

Job Summary

The Senior Data Privacy and Protection Analyst utilizes business knowledge in combination with technical skills to monitor, detect, identify, analyze, evaluate, report and assist in the response of data privacy and protection related security events. The Data Privacy and Protection (DPP) team operates in partnership with the Cyber Security, Governance and Operations teams to drive a security-first IT organization. This role will work closely with all areas of IT, business units, strategic partners and vendors to ensure proper privacy and protection controls are implemented in an effort to reduce risk to the global firm. This role requires expertise in problem solving and a solid understanding of common security controls and data privacy.

Primary Responsibilities

• Monitor and evaluate data events on a daily basis; participate in privacy and protection activities and incident handling.
• Support internal monitoring, alerting, incident management and other privacy & protection tasks as part of normal operations.
• Operate Data Security IT controls (e.g., Palo Alto, Purview, Proofpoint).
• Produce comprehensive documentation and reporting.
• Maintain knowledge of prevalent technical and privacy risks to assist in prioritizing response plans and mitigating controls.

The expectations of this position are not all inclusive; other responsibilities may be assigned as necessary to support the business environment.

Skills

• Technical, security vendor or cyber-risk certifications (e.g., CISSP, CompTIA Security+, GSEC, GCIH, CCSP, Microsoft SC-200/400, CISSP, CTIA, OSCP).
• Experience with security technologies such as SIEM, Endpoint Detection & Response, DLP, WAF, CASB, SASE and Privilege Access Management.
• Familiarity with secure architecture principles, zero trust and cloud security principles.
• Understanding of Security frameworks (NIST CSF, ISO 27001, CIS controls, MITRE ATT&CK).
• Event Monitoring and Incident Response; understanding of encryption mechanisms (data at rest and in transit).
• Basic scripting and coding (e.g., regex) to support data parsing expressions.
• Understanding of Risk Management Frameworks; ability to present technical information for decision making.
• Strong problem solving and troubleshooting skills; ability to work independently; promote secure by design mindset.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Information Security, Cybersecurity, Information Assurance or equivalent experience (preferred).
• 2+ years of practical information security experience; corporate environment experience is not mandatory if demonstrable.
• Strong analytical and communication skills; ability to interact professionally with a diverse group including executives, managers, IT personnel and subject matter experts.

Certifications

• Proven experience in a senior security or IT infrastructure operations role.
• Understanding of data security objectives for large financial services.
• Experience in a regulated industry is desirable; financial services preferred.
• IAPP certifications such as CIPM, CIPP/EU or CIPT or equivalents.

Requisite Skills

• Barings is an Equal Employment Opportunity employer; Minority/Female/Age/Sexual Orientation/Gender Identity/Disability/Protected Veteran status are welcome.

Seniority level

• Associate

Employment type

• Full-time

Job function

• Engineering and Information Technology

Note: Referrals increase your chances of interviewing at Barings.